Inactive [InActive] Clock always set day ahead

Starting at midnight I believe, my clock always displays tomorrow as today. Sometimes am and pm are messed up also. I changed it to correct many times, but just switches back to day ahead at midnight. This is not the Toshiba Laptop. I do not know if this is a bios problem or bad comos battery. My thought is it might be some type of infection. I do not have any malware symptoms, except oppenning ie and closing it in task manager to finally get it to run. (no big deal, i use opera anyway.)

I know combofix has a feature to reset clock settings, but I am unwilling to run that without analyst instructions.

Throughout thanksgiving, I will not have access to this computer, this thread is not that urgent. just a simple problem.

 

info

info.txt logfile of random's system information tool 1.04 2008-11-24 03:32:57

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Shockwave Player 11-->C:\WINDOWS\system32\adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
AIM 6 Cloned--> "C:\Program Files\AIM6_Cloned\unins000.exe "
AIM 6-->C:\Program Files\AIM6\uninst.exe
ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x6f4a
ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_classISPLAY -clean
Authentic-ID Toolbar--> "C:\Program Files\Authentic-ID\Authentic-ID Toolbar\unins000.exe "
avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll ",RunSetup
Bluescreen Screensaver-->C:\WINDOWS\IsUninst.exe -f "C:\Program Files\Sureshot\Bluescreen Screensaver\Uninst.isu "
CallingID-->MsiExec.exe /X{01DA2D62-595E-4348-A763-D6788680C671}
Canon PIXMA iP4000-->C:\WINDOWS\system32\CNMCP64.exe "-PRINTERNAMECanon PIXMA iP4000" "-HELPERDLLC:\BJPrinter\CNMWINDOWS\Canon PIXMA iP4000 Installer\Inst2\cnmis.dll" "-RCDLLC:\BJPrinter\CNMWINDOWS\Canon PIXMA iP4000 Installer\Inst2\cnmi0409.dll "
Catalyst Control Center - Branding-->MsiExec.exe /I{D3B1C799-CB73-42DE-BA0F-2344793A095C}
CCleaner (remove only)--> "C:\Program Files\CCleaner\uninst.exe "
Cepstral Callie 4.2.0-->MsiExec.exe /I{385198CD-D735-498A-B8FF-470A11BF9087}
ClearType Tuning Control Panel Applet-->MsiExec.exe /I{C9E4932C-8417-4E4C-A0E3-EE534810AB4D}
Cloudmark Desktop for Mozilla Thunderbird-->MsiExec.exe /X{527B9B7E-5249-4681-9259-018F7DDB351C}
Colorizer 1.0.0.1-->C:\PROGRA~1\COLORI~1\UNWISE.EXE C:\PROGRA~1\COLORI~1\INSTALL.LOG
Combined Community Codec Pack 2008-01-24--> "C:\Program Files\Combined Community Codec Pack\unins000.exe "
Copernic Desktop Search - Home-->C:\Program Files\Copernic Desktop Search 2\uninst.exe
ExtractNow--> "C:\Program Files\ExtractNow\unins000.exe "
filehippo.com Update Checker--> "C:\Program Files\filehippo.com\uninstall.exe "
Google Toolbar for Internet Explorer--> "C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0C68A50B7874478D.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Grand Theft Auto Vice City-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}\Setup.exe" -l0x9
Gundoff-->C:\Program Files\AIM6\Plugins\Gundoff\Uninstall.exe
HijackThis 2.0.2--> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)--> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe "
Hotfix for Windows Media Player 11 (KB939683)--> "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe "
Hotfix for Windows XP (KB952287)--> "C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe "
Java(TM) 6 Update 10-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
Java(TM) 6 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160060}
Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
KC Softwares SUMo--> "C:\Program Files\KC Softwares\SUMo\unins000.exe "
KWorld PVR-TV 883 Utilities-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{477AB148-138C-46D2-820B-0DBFA744CEE8}\setup.exe" -l0x9 -uninst
KWorld TV883 WDM Drivers-->C:\WINDOWS\c8xunist.exe
LinkPreview plugin-->MsiExec.exe /I{91F30676-6F80-4C5B-8C03-E066D374A481}
LinkProcessor plugin-->MsiExec.exe /I{578C9C79-E33D-4B47-BDE6-2B40A86BA9CC}
Media Library Management Wizard-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\mplibwiz.inf,DefaultUninstall
Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
Microsoft Compression Client Pack 1.0 for Windows XP--> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe "
Microsoft Mike and Mary TTS Engines 5.1-->MsiExec.exe /X{3A0604C2-807A-11DB-8DF8-00508DD5B6B9}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Home and Student 2007--> "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL
Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}
Microsoft Office OneNote MUI (English) 2007-->MsiExec.exe /X{90120000-00A1-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Student 2007 for Learning Essentials-->RunDll32.exe advpack.dll, LaunchINFSectionEx C:\Program Files\Learning Essentials\1.0\en\US\Microsoft Student 2007\Uninstall\Uninstall.inf,Uninstall,,,N
Microsoft Student with Encarta Premium 2008-->MsiExec.exe /I{08041881-FCA5-44A7-B863-D66037A16AAF}
Microsoft Text-to-Speech Engine 4.0 (English)-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\msTTS.inf, Uninstall
Microsoft User-Mode Driver Framework Feature Pack 1.0--> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe "
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.18)-->C:\Program Files\Mozilla Thunderbird\uninstall\helper.exe
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 6.0 Parser-->MsiExec.exe /I{AEB9948B-4FF2-47C9-990E-47014492A0FE}
Opera 9.62-->MsiExec.exe /X{8318FEFD-F467-44D6-82B8-129374BFE9B1}
Personal License Update Wizard for Windows Media Player-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\drmtool.inf,DefaultUninstall
Plus! MP3 Audio Converter LE-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\audcle.inf,DefaultUninstall
Plustek OpticBook 3600-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C043B8C1-E512-46AB-AEE2-009EBDEC0061}\setup.exe" -l0x9
pserv.cpl (remove only)--> "C:\Program Files\p-nand-q.com\pserv.cpl\uninstall.exe "
PVR Plus-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5B893587-00A8-4A4E-83F0-8AFA7BFC7C1A}\Setup.exe" -l0x9
Return to Castle Wolfenstein-->C:\PROGRA~1\RETURN~1\Uninstall\Unwise.exe /u C:\PROGRA~1\RETURN~1\Uninstall\Install.log
Security Update for Windows Media Player 11 (KB936782)--> "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe "
Security Update for Windows Media Player 11 (KB954154)--> "C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe "
Security Update for Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Security Update for Windows XP (KB938464)--> "C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe "
Security Update for Windows XP (KB941569)--> "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe "
Security Update for Windows XP (KB950759)--> "C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe "
Security Update for Windows XP (KB950760)--> "C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe "
Security Update for Windows XP (KB950762)--> "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe "
Security Update for Windows XP (KB950974)--> "C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe "
Security Update for Windows XP (KB951066)--> "C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe "
Security Update for Windows XP (KB951376-v2)--> "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe "
Security Update for Windows XP (KB951698)--> "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe "
Security Update for Windows XP (KB951748)--> "C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe "
Security Update for Windows XP (KB952954)--> "C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe "
Security Update for Windows XP (KB953838)--> "C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe "
Security Update for Windows XP (KB953839)--> "C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe "
Security Update for Windows XP (KB954211)--> "C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe "
Security Update for Windows XP (KB954459)--> "C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe "
Security Update for Windows XP (KB955069)--> "C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe "
Security Update for Windows XP (KB956390)--> "C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe "
Security Update for Windows XP (KB956391)--> "C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe "
Security Update for Windows XP (KB956803)--> "C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe "
Security Update for Windows XP (KB956841)--> "C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe "
Security Update for Windows XP (KB957095)--> "C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe "
Security Update for Windows XP (KB957097)--> "C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe "
Security Update for Windows XP (KB958644)--> "C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe "
Spybot - Search & Destroy--> "C:\Program Files\Spybot - Search & Destroy\unins000.exe "
SpywareBlaster 4.1--> "C:\Program Files\SpywareBlaster\unins000.exe "
TuneUp Utilities 2008-->MsiExec.exe /I{5888428E-699C-4E71-BF71-94EE06B497DA}
Unlocker 1.8.7-->C:\Program Files\Unlocker\uninst.exe
Unreal Tournament 2004-->C:\PROGRAM FILES\UT2004\System\Setup.exe uninstall "UT2004 "
Update for Windows XP (KB898461)--> "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe "
Update for Windows XP (KB942763)--> "C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe "
Update for Windows XP (KB951072-v2)--> "C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe "
Update for Windows XP (KB951978)--> "C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe "
VDMSound-->D:\Program Files\VDMSound\uninst.exe
Visual C++ CRT 9.0-->MsiExec.exe /I{9ED38F62-7A50-4145-8C5D-0FCFFBF10A7B}
VLC media player 0.9.6-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Media Bonus Pack for Windows XP-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmbonus.inf,DefaultUninstall
Windows Media Format 11 runtime--> "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime--> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe "
Windows Media Player 11--> "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11--> "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe "
Windows Media Player Playlist Import to Excel Wizard-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\mpxlswiz.inf,DefaultUninstall
Windows Media Player Skin Importer-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wa2wmp.inf,DefaultUninstall
Windows XP Service Pack 3--> "C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe "

======Hosts File======

127.0.0.1 007guard.com
127.0.0.1 www.007guard.com
127.0.0.1 008i.com
127.0.0.1 008k.com
127.0.0.1 www.008k.com
127.0.0.1 00hq.com
127.0.0.1 www.00hq.com
127.0.0.1 010402.com
127.0.0.1 032439.com
127.0.0.1 www.032439.com

======Security center information======

AV: avast! antivirus 4.8.1290 [VPS 081123-0]

======Environment variables======

"ComSpec "=%SystemRoot%\system32\cmd.exe
"Path "=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Cepstral\bin;D:\Program Files\VDMSound
"windir "=%SystemRoot%
"OS "=Windows_NT
"PROCESSOR_ARCHITECTURE "=x86
"PROCESSOR_LEVEL "=15
"PROCESSOR_IDENTIFIER "=x86 Family 15 Model 2 Stepping 7, GenuineIntel
"PROCESSOR_REVISION "=0207
"NUMBER_OF_PROCESSORS "=1
"PATHEXT "=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP "=%SystemRoot%\TEMP
"TMP "=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK "=NO
"VDMSPath "=D:\Program Files\VDMSound

-----------------EOF-----------------

 

log

Logfile of random's system information tool 1.04 (written by random/random)
Run by Jordan at 2008-11-24 03:30:44
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 103 GB (82%) free of 126 GB
Total RAM: 1535 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:32:55 AM, on 11/24/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cepstral\bin\CepstralLicSrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Plustek\OpticBook 3600\Am32Plus.exe
C:\Program Files\KWorld Multimedia\PVR-TV 883 Utilities\C8XRCtl.exe
C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Jordan\Desktop\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Jordan.exe
C:\WINDOWS\system32\taskmgr.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O2 - BHO: Authentic-ID Toolbar - {B0DF5714-5A99-4A21-9C98-4F93FB5C398C} - C:\Program Files\Authentic-ID\Authentic-ID Toolbar\ToolbarATL.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: CallingID for IE - {FBF2401B-7447-4727-BE5D-C19B2075CA84} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Copernic Desktop Search - Home - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand300000081.dll
O3 - Toolbar: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file)
O3 - Toolbar: (no name) - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - (no file)
O3 - Toolbar: Authentic-ID Toolbar - {B0DF5714-5A99-4A21-9C98-4F93FB5C398C} - C:\Program Files\Authentic-ID\Authentic-ID Toolbar\ToolbarATL.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SbUsb AudCtrl] RunDll32 sbusbdll.dll,RCMonitor
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe "
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe "
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe "
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L08AXLRD_1415164] "C:\Program Files\Microsoft Student\Microsoft Student with Encarta Premium 2008 DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6_Cloned\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - Global Startup: Action Express (OpticBook 3600).lnk = ?
O4 - Global Startup: Remote Control.lnk = C:\Program Files\KWorld Multimedia\PVR-TV 883 Utilities\C8XRCtl.exe
O8 - Extra context menu item: &Links to this page - C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Web\gbacklinks.htm
O8 - Extra context menu item: &Similar pages - C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Web\gsimilar.htm
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Look up in Mr&Check... - C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Web\tumrcheck.htm
O8 - Extra context menu item: Open in &new window - C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Web\tuofinw.htm
O8 - Extra context menu item: Search with &Google - C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Web\gsearch.htm
O8 - Extra context menu item: Show page from the &cache - C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Web\gcache.htm
O8 - Extra context menu item: Translate this page with Google - C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Web\gtranslate.htm
O8 - Extra context menu item: View old version at &archives.org - C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Web\tuarch.htm
O8 - Extra context menu item: Zoom &out - C:\Documents and Settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\Web\tuzoomout.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Encarta Search Bar - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - https://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1219349541797
O17 - HKLM\System\CCS\Services\Tcpip\..\{399AAD98-92A5-466A-AC51-E7E148FF1D91}: NameServer = 208.67.222.222,208.67.220.220
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Cepstral License Server - Cepstral, LLC - C:\Program Files\Cepstral\bin\CepstralLicSrv.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 10409 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\ashQuick.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2008-10-26 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-11-03 251504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B0DF5714-5A99-4A21-9C98-4F93FB5C398C}]
Authentic-ID Toolbar - C:\Program Files\Authentic-ID\Authentic-ID Toolbar\ToolbarATL.dll [2007-04-25 458752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll [2008-11-03 522224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2008-10-26 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FBF2401B-7447-4727-BE5D-C19B2075CA84}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10 321120]
{968631B6-4729-440D-9BF4-251F5593EC9A} - Copernic Desktop Search - Home - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand300000081.dll [2008-09-18 995328]
{DE9C389F-3316-41A7-809B-AA305ED9D922}
{10134636-E7AF-4AC5-A1DC-C7C44BB97D81}
{B0DF5714-5A99-4A21-9C98-4F93FB5C398C} - Authentic-ID Toolbar - C:\Program Files\Authentic-ID\Authentic-ID Toolbar\ToolbarATL.dll [2007-04-25 458752]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2008-11-03 251504]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SbUsb AudCtrl "=RunDll32 sbusbdll.dll []
"Acrobat Assistant 8.0 "=C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2008-10-14 623992]
"SunJavaUpdateSched "=C:\Program Files\Java\jre6\bin\jusched.exe [2008-10-26 136600]
"IntelliPoint "=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2008-06-10 1406024]
"avast! "=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-11-18 81000]
"StartCCC "=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-29 61440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe "=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"L08AXLRD_1415164 "=C:\Program Files\Microsoft Student\Microsoft Student with Encarta Premium 2008 DVD\EDICT.EXE [2007-05-21 351000]
"Aim6 "=C:\Program Files\AIM6_Cloned\aim6.exe [2008-10-21 50472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PVR Agent]
C:\Program Files\V-Stream Multimedia\PVR Plus\TVR\Scheduled.exe [2005-12-21 754176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^TV Remote Control.lnk]
C:\PROGRA~1\V-STRE~1\TV88XU~1\C8XRCtl.exe [2004-06-08 57344]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Action Express (OpticBook 3600).lnk - C:\Program Files\Plustek\OpticBook 3600\Am32Plus.exe
Remote Control.lnk - C:\Program Files\KWorld Multimedia\PVR-TV 883 Utilities\C8XRCtl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-10-28 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername "=0
"legalnoticecaption "=
"legalnoticetext "=
"shutdownwithoutlogon "=1
"undockwithoutlogon "=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun "=145
"NoSharedDocuments "=01000000
"NoDrives "=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun "=
"NoDriveTypeAutoRun "=
"NoDrives "=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\AIM6\aim6.exe "= "C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM "
"C:\WINDOWS\system32\sessmgr.exe "= "C:\WINDOWS\system32\sessmgr.exe:*isabled:Remote Assistance "
"C:\Program Files\AIM6_Cloned\aim6.exe "= "C:\Program Files\AIM6_Cloned\aim6.exe:*:Enabled:AIM "
"C:\Program Files\Internet Explorer\iexplore.exe "= "C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer "
"C:\Program Files\Common Files\AOL\Loader\aolload.exe "= "C:\Program Files\Common Files\AOL\Loader\aolload.exe:*isabled:AOL Loader "
"C:\Program Files\Mozilla Thunderbird\thunderbird.exe "= "C:\Program Files\Mozilla Thunderbird\thunderbird.exe:*isabled:Mozilla Thunderbird "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe "= "%windir%\system32\sessmgr.exe:*:enabledxpsp2res.dll,-22019 "

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6219a632-6581-11dd-8da7-0006251a577a}]
shell\AutoRun\command - H:\LaunchU3.exe


======List of files/folders created in the last 3 months======

2008-11-23 10:38:16 ----D---- C:\Program Files\ExplorerXP
2008-11-23 10:31:17 ----D---- C:\Program Files\ViSplore
2008-11-23 10:06:19 ----D---- C:\rsit
2008-11-22 01:25:56 ----D---- C:\WINDOWS\Performance
2008-11-22 01:25:44 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Corporation
2008-11-21 23:17:27 ----N---- C:\WINDOWS\SchedLgU.Txt
2008-11-21 20:54:17 ----D---- C:\Program Files\Spybot - Search & Destroy
2008-11-20 23:21:08 ----D---- C:\Program Files\Mozilla Firefox
2008-11-20 02:41:26 ----D---- C:\Documents and Settings\Jordan\Application Data\KC Softwares
2008-11-20 02:41:12 ----D---- C:\Program Files\KC Softwares
2008-11-19 22:22:05 ----D---- C:\Documents and Settings\Jordan\Application Data\vlc
2008-11-19 22:21:04 ----D---- C:\Program Files\VideoLAN
2008-11-14 19:27:00 ----D---- C:\WINDOWS\system32\Adobe
2008-11-14 14:39:17 ----D---- C:\Documents and Settings\All Users\Application Data\ATI
2008-11-11 02:25:49 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-11 02:24:43 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2008-11-11 02:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2008-11-10 09:40:58 ----D---- C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2008-11-10 04:44:17 ----A---- C:\WINDOWS\system32\aswBoot.exe
2008-11-10 04:44:15 ----D---- C:\Program Files\Alwil Software
2008-11-10 04:13:54 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2008-11-05 01:03:01 ----HD---- C:\WINDOWS\PIF
2008-11-03 21:43:36 ----D---- C:\Documents and Settings\Jordan\Application Data\Authentic-ID
2008-11-03 21:43:15 ----A---- C:\WINDOWS\system32\htmlayout.dll
2008-11-03 21:43:14 ----D---- C:\Program Files\Authentic-ID
2008-11-03 21:43:14 ----A---- C:\WINDOWS\system32\unicows.dll
2008-11-03 21:43:14 ----A---- C:\WINDOWS\system32\sqlite3.dll
2008-11-03 21:40:21 ----D---- C:\Documents and Settings\Jordan\Application Data\MyLittleMole
2008-11-03 21:27:16 ----D---- C:\Documents and Settings\Jordan\Application Data\CallingID
2008-10-31 16:41:13 ----D---- C:\Program Files\AIM6_Cloned
2008-10-31 16:27:21 ----D---- C:\Program Files\Common Files\AOL
2008-10-31 16:27:12 ----D---- C:\Program Files\AIM6
2008-10-29 19:56:00 ----D---- C:\Documents and Settings\All Users\Application Data\ESET
2008-10-28 23:15:30 ----D---- C:\Documents and Settings\Jordan\Application Data\Nero
2008-10-28 23:01:29 ----D---- C:\Program Files\Microsoft IntelliPoint
2008-10-28 22:10:54 ----D---- C:\Program Files\Nero
2008-10-28 22:09:49 ----D---- C:\Program Files\Common Files\Nero
2008-10-28 21:08:33 ----A---- C:\WINDOWS\Irremote.ini
2008-10-28 21:02:49 ----D---- C:\Program Files\Windows Sidebar
2008-10-28 20:39:34 ----D---- C:\Documents and Settings\All Users\Application Data\Nero
2008-10-26 23:14:54 ----A---- C:\WINDOWS\UNBOC.EXE
2008-10-26 23:14:53 ----A---- C:\WINDOWS\CMDLIC.DLL
2008-10-26 23:14:47 ----D---- C:\Documents and Settings\All Users\Application Data\BOC427
2008-10-26 23:14:40 ----D---- C:\Program Files\Comodo
2008-10-26 13:09:31 ----D---- C:\Program Files\filehippo.com
2008-10-26 11:25:46 ----A---- C:\WINDOWS\system32\javaws.exe
2008-10-26 11:25:46 ----A---- C:\WINDOWS\system32\javaw.exe
2008-10-26 11:25:46 ----A---- C:\WINDOWS\system32\java.exe
2008-10-26 11:25:46 ----A---- C:\WINDOWS\system32\deploytk.dll
2008-10-24 22:05:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-10-18 15:10:11 ----A---- C:\DVDPATH.TXT
2008-10-14 19:07:40 ----HDC---- C:\WINDOWS\$NtUninstallKB956390$
2008-10-14 19:07:34 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-10-14 19:07:23 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-10-14 19:07:17 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-10-14 19:07:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-14 19:07:04 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-09-30 16:43:34 ----A---- C:\WINDOWS\system32\msxml4.dll
2008-09-13 00:32:20 ----D---- C:\Documents and Settings\Jordan\Application Data\Malwarebytes
2008-09-13 00:32:16 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-09-12 19:42:50 ----D---- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-09-12 19:42:31 ----A---- C:\WINDOWS\system32\SpOrder.dll
2008-09-12 19:41:06 ----D---- C:\WINDOWS\Internet Logs
2008-09-12 17:53:03 ----D---- C:\Program Files\XP Firewall Commander
2008-09-11 13:37:55 ----D---- C:\Program Files\Sureshot
2008-09-09 21:38:26 ----A---- C:\WINDOWS\system32\msvcr70.dll
2008-09-09 21:38:26 ----A---- C:\WINDOWS\system32\msvcp70.dll
2008-09-09 21:38:25 ----A---- C:\WINDOWS\system32\mfc70.dll
2008-09-09 21:20:07 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2008-09-09 21:20:03 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-05 19:40:21 ----D---- C:\Documents and Settings\Jordan\Application Data\Mozilla
2008-09-04 11:18:36 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2008-09-03 12:01:49 ----D---- C:\Program Files\Windows Live Toolbar
2008-09-02 14:22:10 ----D---- C:\Documents and Settings\All Users\Application Data\InstallShield
2008-09-02 11:36:17 ----D---- C:\Program Files\Common Files\Scanner
2008-09-02 01:21:09 ----D---- C:\Documents and Settings\Jordan\Application Data\Yahoo!
2008-08-27 19:19:24 ----D---- C:\Program Files\ViStart
2008-08-25 01:34:47 ----A---- C:\WINDOWS\system32\CF31596.exe
2008-08-25 00:13:19 ----SHD---- C:\RECYCLER

======List of files/folders modified in the last 3 months======

2008-11-24 03:52:57 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2008-11-24 03:30:28 ----D---- C:\WINDOWS\Prefetch
2008-11-24 03:30:22 ----D---- C:\WINDOWS\temp
2008-11-24 03:29:27 ----D---- C:\Program Files\SpywareBlaster
2008-11-24 03:24:38 ----RD---- C:\Program Files
2008-11-24 02:37:34 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-11-24 01:15:01 ----D---- C:\WINDOWS\system32
2008-11-23 13:56:09 ----SHD---- C:\WINDOWS\Installer
2008-11-23 13:56:09 ----SHD---- C:\Config.Msi
2008-11-23 13:42:33 ----D---- C:\Program Files\Mozilla Thunderbird
2008-11-23 13:35:30 ----D---- C:\WINDOWS
2008-11-23 11:57:56 ----D---- C:\WINDOWS\system32\CatRoot2
2008-11-22 01:25:39 ----SD---- C:\Documents and Settings\Jordan\Application Data\Microsoft
2008-11-21 23:15:16 ----D---- C:\Documents and Settings\Jordan\Application Data\Adobe
2008-11-21 23:13:41 ----A---- C:\WINDOWS\WININIT.INI
2008-11-21 22:59:06 ----D---- C:\Program Files\TuneUp Utilities 2008
2008-11-21 14:59:00 ----D---- C:\WINDOWS\Debug
2008-11-21 14:55:13 ----D---- C:\WINDOWS\WinSxS
2008-11-19 13:48:40 ----D---- C:\WINDOWS\system32\config
2008-11-14 18:11:34 ----HD---- C:\WINDOWS\inf
2008-11-14 18:11:34 ----D---- C:\WINDOWS\system32\NtmsData
2008-11-14 14:36:01 ----RSD---- C:\WINDOWS\assembly
2008-11-14 14:35:30 ----D---- C:\Program Files\ATI Technologies
2008-11-14 14:32:57 ----RSHDC---- C:\WINDOWS\system32\dllcache
2008-11-14 14:32:48 ----D---- C:\WINDOWS\system32\drivers
2008-11-11 02:25:48 ----HD---- C:\WINDOWS\$hf_mig$
2008-11-11 02:24:11 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-11-10 09:57:07 ----D---- C:\Program Files\Combined Community Codec Pack
2008-11-10 09:57:06 ----D---- C:\Program Files\Movie Maker
2008-11-10 09:57:06 ----D---- C:\Program Files\Messenger
2008-11-10 09:40:57 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-11-10 04:57:44 ----D---- C:\Held Files
2008-11-08 21:22:32 ----D---- C:\Program Files\Internet Explorer
2008-11-07 14:54:30 ----D---- C:\WINDOWS\Help
2008-11-04 21:20:09 ----D---- C:\Program Files\Opera
2008-11-03 22:14:55 ----D---- C:\Program Files\Google
2008-11-03 22:13:45 ----D---- C:\Documents and Settings\All Users\Application Data\Google
2008-11-03 21:27:15 ----D---- C:\WINDOWS\system
2008-11-03 21:26:55 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2008-11-03 21:13:55 ----SD---- C:\WINDOWS\Tasks
2008-11-03 19:10:25 ----A---- C:\WINDOWS\system32\MRT.exe
2008-11-02 01:49:47 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-10-31 16:46:59 ----D---- C:\Program Files\Colorizer
2008-10-31 16:37:01 ----D---- C:\Documents and Settings\All Users\Application Data\acccore
2008-10-31 16:37:00 ----D---- C:\Documents and Settings\All Users\Application Data\Viewpoint
2008-10-31 16:27:21 ----D---- C:\Program Files\Common Files
2008-10-28 23:01:45 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-10-28 23:01:42 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-10-28 21:23:22 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2008-10-28 21:22:02 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2008-10-28 21:11:35 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2008-10-28 21:11:21 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2008-10-28 21:11:12 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2008-10-28 21:11:03 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2008-10-28 21:10:59 ----A---- C:\WINDOWS\system32\atioglxx.dll
2008-10-28 21:10:45 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2008-10-28 21:09:10 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2008-10-28 21:07:44 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2008-10-28 21:05:00 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2008-10-28 20:57:58 ----A---- C:\WINDOWS\system32\ati3duag.dll
2008-10-28 20:49:31 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2008-10-28 20:41:13 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2008-10-28 20:25:31 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2008-10-28 20:21:21 ----A---- C:\WINDOWS\system32\atikvmag.dll
2008-10-28 20:19:50 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2008-10-28 20:19:40 ----A---- C:\WINDOWS\system32\atitvo32.dll
2008-10-28 20:18:30 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2008-10-28 20:12:51 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2008-10-26 11:25:28 ----D---- C:\Program Files\Java
2008-10-21 12:51:43 ----A---- C:\WINDOWS\system32\atibrtmon.exe
2008-10-20 18:40:19 ----A---- C:\WINDOWS\NeroDigital.ini
2008-10-15 11:34:24 ----A---- C:\WINDOWS\system32\netapi32.dll
2008-10-14 20:37:27 ----D---- C:\Program Files\Copernic Desktop Search 2
2008-10-14 19:06:58 ----D---- C:\WINDOWS\system32\CatRoot
2008-10-06 10:12:56 ----D---- C:\WINDOWS\Microsoft.NET
2008-10-05 23:45:41 ----D---- C:\WINDOWS\system32\mui
2008-09-09 20:14:56 ----A---- C:\WINDOWS\system32\msxml6.dll
2008-09-06 23:43:38 ----D---- C:\WINDOWS\security
2008-09-05 18:02:17 ----RD---- C:\WINDOWS\Web
2008-09-04 21:47:16 ----D---- C:\Program Files\Trend Micro
2008-09-04 12:15:04 ----A---- C:\WINDOWS\system32\msxml3.dll
2008-09-03 19:08:38 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2008-09-03 12:00:59 ----D---- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-09-03 11:55:48 ----D---- C:\Program Files\Cloudmark
2008-09-02 14:52:41 ----D---- C:\Documents and Settings\All Users\Application Data\FLEXnet
2008-09-02 14:22:12 ----D---- C:\Program Files\Common Files\Cloudmark
2008-09-02 14:22:05 ----D---- C:\Program Files\Common Files\InstallShield
2008-09-02 14:22:05 ----D---- C:\Documents and Settings\All Users\Application Data\Cloudmark
2008-09-02 14:21:42 ----D---- C:\WINDOWS\Downloaded Installations
2008-09-01 22:50:46 ----D---- C:\Program Files\Unlocker
2008-09-01 22:32:21 ----D---- C:\WINDOWS\Minidump
2008-08-25 10:53:31 ----SHD---- C:\System Volume Information
2008-08-25 10:53:31 ----D---- C:\WINDOWS\system32\Restore
2008-08-25 10:51:16 ----D---- C:\WINDOWS\ERDNT
2008-08-25 00:57:11 ----D---- C:\WINDOWS\Media

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-11-18 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-11-18 110160]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-11-18 50864]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-13 36352]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-11-18 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-11-18 94032]
R2 CX23880;KWorld TV88X Video Capture; C:\WINDOWS\system32\drivers\cx88vid.sys [2005-01-18 186880]
R2 CX88XBAR;KWorld TV88X Crossbar; C:\WINDOWS\system32\drivers\CX88XBAR.sys [2005-01-18 9728]
R2 CXTUNE;KWorld TV88X Tuner; C:\WINDOWS\system32\drivers\CX88TUNE.sys [2005-01-18 37504]
R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys []
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-11-18 23152]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-10-28 3341824]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\System32\DRIVERS\ctsfm2k.sys [2004-04-25 130384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\System32\DRIVERS\ctoss2k.sys [2004-04-25 178736]
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\System32\DRIVERS\point32.sys [2008-06-10 31048]
R3 sbusb;Sound Blaster USB Audio Driver; C:\WINDOWS\System32\DRIVERS\sbusb.sys [2004-07-27 1643648]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\System32\DRIVERS\sisnic.sys [2008-04-13 32768]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 ASFWHide;ASFWHide; \??\C:\DOCUME~1\Jordan\LOCALS~1\Temp\ASFWHide []
S3 BOCDRIVE;BOClean Kernel Monitor.; \??\C:\Program Files\Comodo\CBOClean\BOCDRIVE.sys []
S3 Bridge;MAC Bridge; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 BridgeMP;MAC Bridge Miniport; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 LinksysFVNETusbl(AR)(R);Linksys FVNETusbl(AR)(R) Service for Instant Wireless USB Network Adapter ver.2.6; C:\WINDOWS\system32\DRIVERS\vnetusbl.sys [2004-03-09 108032]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 USBNET_XP;Instant Wireless XP USB Network Adapter ver.2.6 Driver; C:\WINDOWS\system32\DRIVERS\netusbxp.sys [2002-02-20 72576]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2003-03-31 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2008-11-18 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-10-28 585728]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2008-11-18 155160]
R2 Cepstral License Server;Cepstral License Server; C:\Program Files\Cepstral\bin\CepstralLicSrv.exe [2007-03-15 57344]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2008-11-18 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2008-11-18 352920]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-06-21 654848]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-10-28 593920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe []
S3 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-30 935208]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2008-06-22 355584]
S3 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

 

updating status

Because I cannot edit my title,
It happens sometimes, not always. Probably once or twice a week.

I won't have access from this Wednesday to Sunday with this computer.

 

Hi sniper,

No apparent infections. Fix the following leftovers with HijackThis though.

O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O3 - Toolbar: (no name) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - (no file)
O3 - Toolbar: (no name) - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - (no file)


I would be more inclined to think the MOBO battery dying would cause the clock to reset to something other than a day ahead, though it probably wouldn't hurt to try another. Did you double check the timezone setting in your Date/Time console?

 

It says it's the next day because it is the next day

The clock says it's the next day at 12:01AM not at midnight. For example at midnight (or 12:00PM) on Monday it's still Monday. However in another minute it will be 12:01AM and then it will be Tuesday.

I hope this helps.

 

Actually, 12 o'clock midnight is 12:00 AM, noon is 12:00 PM

http://en.wikipedia.org/wiki/12-hour_clock

However, you did point out what I missed, thinking that the day was actually jumping forward a full 24 hours, eg; should change to Wednesday at midnight but goes to Thursday instead. Sniper, at midnight it IS the next day.

 

Then, I meant TWO days ahead.

Sorry I have not gotten back to this thread, been very busy.
I fixed the HJT entries.

--
I will have someone at some point check my CMOS battery. I am not that familar with that stuff.

I checked timezone and it is set correctly.

The problem seems to have gone away as of now. If anymore problems, I will let you know, but you can mark resolved.

 

Did you sent this to me?

Hi sniper9228, I just got an email saying you sent me a message and this is what the link took me to. Did you send this to e? If so, I don't understand why, can you please tell me why I got this message from you? Thank you.

 

NO, you subscribed to this thread. You will be notified anytime a new reply takes place. If you wish to stop this, unsubscribe to my thread -> subscriptions -> user cp

It is because you were part of my thread. It is sent automatically by BBS.

----
***PLEASE DON'T RESPOND TO THIS EMAIL***
It is sent from an unmonitored account, so no one will read your email.

***PLEASE DON'T RESPOND TO THIS EMAIL***
It is sent from an unmonitored account, so no one will read your email.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Unsubscription information:

To unsubscribe from this thread, please visit this page:
http://www.WindowsBBS.com/subscription.php?do=usub&t=78959

To unsubscribe from ALL threads, please visit this page:
http://www.WindowsBBS.com/subscription.php?do=viewsubscription&folderid=all